CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security

A Mumbai company's employee finds her files unreadable and a message demanding payment in cryptocurrency for a decryption key. Investigation shows she opened an attachment sent by an unknown sender, and the company had no offline backups. Which statement is most accurate?

It is a ransomware attack, a category of malware delivered through a malicious attachment. It encrypts files and demands payment for the key. Regularly tested offline backups are the main control, letting the company restore data without paying, unlike spyware, which silently collects information.

1. AIt is a ransomware attack and a type of malware; maintaining tested offline backups is the key control that reduces dependence on paying the ransomCorrect
2. BIt is a spyware attack, since the files were silently copied to the attacker without being encrypted
3. CIt is a logic bomb, since the damage occurred on a date triggered by the employee
4. DIt is a pharming attack, since the attachment redirected her to a fake website